Lucene search
+L

9264 matches found

Prion
Prion
added 2020/08/31 4:15 p.m.22 views

Design/Logic Flaw

The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execute arbitrary code via the debug interface...

4.6CVSS6.9AI score0.00538EPSS
SaveExploits1References1
Prion
Prion
added 2020/08/31 4:15 p.m.23 views

Design/Logic Flaw

Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the observed data...

2.1CVSS4.8AI score0.0038EPSS
SaveExploits1References1
Prion
Prion
added 2020/08/31 4:15 p.m.28 views

Memory corruption

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module...

1.9CVSS4.6AI score0.00234EPSS
SaveExploits0References1
Prion
Prion
added 2020/08/31 4:15 p.m.22 views

Design/Logic Flaw

Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires which have insufficient physical protection...

4.6CVSS6.9AI score0.00548EPSS
SaveExploits1References1
Prion
Prion
added 2020/08/31 4:15 p.m.24 views

Memory corruption

The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

2.1CVSS4.8AI score0.00327EPSS
SaveExploits0References1
Prion
Prion
added 2020/08/31 4:15 p.m.16 views

Memory corruption

The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU...

2.1CVSS4.7AI score0.00387EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2020/08/31 3:38 p.m.35 views

CVE-2020-13471

Apex Microelectronics APM32F103 devices allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration...

6.9AI score0.00596EPSS
SaveExploits1References1
CVE
CVE
added 2020/08/31 3:33 p.m.49 views

CVE-2020-13470

CVE-2020-13470 affects Gigadevice GD32F103 and GD32F130 microcontrollers. The root cause is physical access enabling probing of bonding wires to de-obfuscate and extract data, with potential high integrity impact and no public remediation details in the provided documents. Monitor for vendor advi...

4.6CVSS4.7AI score0.0038EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/08/31 3:33 p.m.38 views

CVE-2020-13470

Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the observed data...

4.7AI score0.0038EPSS
SaveExploits1References1
CVE
CVE
added 2020/08/31 3:28 p.m.45 views

CVE-2020-13468

CVE-2020-13468 affects Gigadevice GD32F130 devices. Affected component is the device’s inter-IC bonding wires where fault injection can bypass physical protections, enabling a local attacker with access to escalate debug interface permissions. The root cause is insufficient physical protection of...

6.8CVSS6.8AI score0.00548EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/08/31 3:28 p.m.38 views

CVE-2020-13468

Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires which have insufficient physical protection...

6.9AI score0.00548EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2020/08/31 3:26 p.m.36 views

CVE-2020-13467

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

4.7AI score0.00297EPSS
SaveExploits0References1
CVE
CVE
added 2020/08/31 3:25 p.m.48 views

CVE-2020-13466

The CVE-2020-13466 entry concerns STMicroelectronics STM32F103 devices. The vulnerability is a local, physical-access issue where an attacker can trigger arbitrary code execution through a power glitch combined with a specific flash patch/breakpoint unit configuration. The description and linked ...

7.2CVSS6.9AI score0.00415EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/08/31 3:23 p.m.33 views

CVE-2020-13465

The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execute arbitrary code via the debug interface...

6.9AI score0.00538EPSS
SaveExploits1References1
CVE
CVE
added 2020/08/31 3:22 p.m.61 views

CVE-2020-13464

CVE-2020-13464 affects China Key Systems & Integrated Circuit CKS32F103 devices. The vulnerability is in the flash memory readout protection, allowing a physical attacker to extract firmware through the debug interface by leveraging the CPU or DMA module. Impact stated in sources is firmware disc...

4.2CVSS4.5AI score0.00234EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/08/31 3:22 p.m.48 views

CVE-2020-13464

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module...

4.4AI score0.00234EPSS
SaveExploits0References1
CVE
CVE
added 2020/08/31 3:21 p.m.49 views

CVE-2020-13463

CVE-2020-13463 affects Apex Microelectronics APM32F103 devices, describing a flaw in the flash memory readout protection that can allow physical attackers to extract firmware via the debug interface and exception handling. The NVD metrics show CVSS v2 base score 2.1 (LOW) and CVSS v3.1 base score...

4.6CVSS4.6AI score0.00327EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/08/31 3:21 p.m.42 views

CVE-2020-13463

The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

4.7AI score0.00327EPSS
SaveExploits0References1
NVD
NVD
added 2020/08/26 4:15 p.m.15 views

CVE-2020-15483

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, without requiring a password, with complete access...

7.2CVSS6.5AI score0.00424EPSS
SaveExploits1References2
Prion
Prion
added 2020/08/26 4:15 p.m.22 views

Default credentials

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, without requiring a password, with complete access...

7.2CVSS6.5AI score0.00424EPSS
SaveExploits1References2
Rows per page
Query Builder